What is AI agent governance?
AI agent governance is the practice of defining rules, boundaries, and behavioral constraints for autonomous AI agents. ClawdRules provides 482 configurable rules across 5 security domains — spending limits, merchant controls, velocity checks, budget categories, and behavioral boundaries — so you maintain human control over what your AI agents can do.
What is a soul.md file?
A soul.md file is a personality definition document for AI agents. It defines your agent's voice, values, personality traits, and behavioral directives. ClawdRules lets you create soul.md profiles with 80+ traits, 70+ directives, 6 archetypes, and a unique origin story — giving your AI agent a consistent, controllable personality.
How does the rule engine evaluate transactions?
The ClawdRules rule engine evaluates transactions in real-time using a priority-ordered rule chain. When your AI agent wants to make a purchase or take an action, it sends a request to the /api/v1/agent/check endpoint. The engine evaluates all applicable rules and returns allow, deny, or escalate — with sub-millisecond response times and a first-deny-wins safety model.
What is anomaly detection?
ClawdRules builds per-agent behavioral baselines from 30 days of transaction history. Every transaction is scored against this baseline using 5 weighted flags: amount deviation (z-score analysis), transaction velocity, time-of-day patterns, merchant novelty, and category novelty. The composite score (0-100) is informational only — it never auto-denies. Moderate anomalies adjust trust scores by -0.5, severe anomalies by -2.0, creating indirect governance through the earned trust system.
How do trust scores work?
Trust scores use an earned autonomy model. Every agent starts at 50 (medium trust) and gains or loses points based on behavior — successful transactions increase trust, rule violations and anomalies decrease it. Your trust level (untrusted, low, medium, high, very high) determines a spending multiplier that adjusts your rule thresholds. High-trust agents get higher spending limits automatically. Think of it as a credit score for AI agents.
How do I integrate as an AI agent?
For Claude agents: run "claude mcp add clawdrules -- npx -y clawdrules-mcp" to get 13 governance tools with zero configuration. For any other agent: use the REST API with Bearer token authentication. Call POST /connect to load your operating context, POST /check before transactions, and POST /checkout for the full ACP lifecycle. Discovery files are at /.well-known/ai-plugin.json (plugin manifest), /openapi.yaml (spec), and /llms.txt (capabilities summary).
Which AI platforms does ClawdRules work with?
ClawdRules works with any AI platform that can make REST API calls. Connect Claude, ChatGPT, Gemini, or custom AI agents using a simple API key. The Agent API has 5 core endpoints: connect (register your agent), check (evaluate rules before acting), rules (fetch configured rules), soul (fetch personality profile), and stores (fetch trusted/blocked merchants). Plus trust score and checkout lifecycle endpoints.
What is the AP2 protocol?
AP2 (Agent Payment Protocol) is Google's specification for AI agents making financial transactions. ClawdRules is built with AP2 support including CartMandate, IntentMandate, and PaymentMandate — ensuring your agent governance is compatible with emerging industry standards for agent-driven commerce.
How does passkey authentication work?
ClawdRules uses passkey-only authentication — no passwords are ever created, stored, or transmitted. You authenticate with Face ID, Touch ID, or Windows Hello using the WebAuthn standard. Passkeys are phishing-resistant by design because they're bound to the specific website domain and stored securely on your device.